deploy: 배포 test #16
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Backend CI/CD | |
| on: | |
| push: | |
| branches: [ "backend_main" ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| env: | |
| working-directory: ./backend | |
| APPLICATION: ${{ secrets.APPLICATION }} | |
| GOOGLE_APPLICATION_CREDENTIALS: ${{ secrets.GOOGLE_APPLICATION_CREDENTIALS }} | |
| steps: | |
| # 소스 코드 체크아웃 | |
| - uses: actions/checkout@v2 | |
| # JDK 17 설정 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v2 | |
| with: | |
| java-version: '17' | |
| distribution: 'adopt' | |
| # Gradle 패키지 캐시 | |
| - name: Cache Gradle packages | |
| uses: actions/cache@v2 | |
| with: | |
| path: | | |
| ~/.gradle/caches | |
| ~/.gradle/wrapper | |
| key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }} | |
| restore-keys: | | |
| ${{ runner.os }}-gradle- | |
| # 설정 파일 생성 | |
| - run: | | |
| mkdir ./backend/src/main/resources | |
| cd ./backend/src/main/resources | |
| touch ./application.yml | |
| echo "${{env.APPLICATION}}" > ./application.yml | |
| touch ./firebase-key.json | |
| echo "${{env.GOOGLE_APPLICATION_CREDENTIALS}}" | base64 --decode > ./firebase-key.json | |
| # 설정 파일을 작업공간에 저장 | |
| - uses: actions/upload-artifact@v2 | |
| with: | |
| name: application.yml | |
| path: ./backend/src/main/resources/application.yml | |
| - uses: actions/upload-artifact@v2 | |
| with: | |
| name: firebase-key.json | |
| path: ./backend/src/main/resources/firebase-key.json | |
| # gradlew 권한 설정 | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| working-directory: ${{ env.working-directory }} | |
| # Gradle로 빌드 | |
| - name: Build with Gradle | |
| run: ./gradlew build | |
| working-directory: ${{ env.working-directory }} | |
| # Gradle 캐시 정리 | |
| - name: Cleanup Gradle Cache | |
| if: ${{ always() }} | |
| run: | | |
| rm -f ~/.gradle/caches/modules-2/modules-2.lock | |
| rm -f ~/.gradle/caches/modules-2/gc.properties | |
| # Docker 이미지 빌드 및 푸시 | |
| - name: Docker build | |
| run: | | |
| docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }} | |
| docker build --no-cache -t ${{ secrets.DOCKER_USERNAME }}/moing_admin:green . | |
| docker build --no-cache -t ${{ secrets.DOCKER_USERNAME }}/moing_admin:blue . | |
| docker push ${{ secrets.DOCKER_USERNAME }}/moing_admin:green | |
| docker push ${{ secrets.DOCKER_USERNAME }}/moing_admin:blue | |
| # EC2로 deploy.sh 전송 | |
| - name: Deploy deploy.sh to EC2 | |
| uses: appleboy/scp-action@master | |
| with: | |
| host: ${{ secrets.EC2_SERVER_HOST }} | |
| username: ec2-user | |
| key: ${{ secrets.PRIVATE_KEY }} | |
| source: "./deploy.sh" | |
| target: "/home/ec2-user/" | |
| # 배포 스크립트 실행 | |
| - name: Deploy on EC2 | |
| uses: appleboy/ssh-action@master | |
| with: | |
| host: ${{ secrets.EC2_SERVER_HOST }} | |
| username: ec2-user | |
| key: ${{ secrets.PRIVATE_KEY }} | |
| envs: GITHUB_SHA | |
| script: | | |
| chmod +x /home/ec2-user/deploy.sh | |
| /home/ec2-user/deploy.sh |